# DPC GDPR Data Subject Rights

> Data subject rights (Art. 15–23) for DPC self-assessment: SAR, portability, deletion/rectification, restriction, object, profiling, and restrictions.



Tags: DPC, GDPR, Ireland, Compliance, Data subject rights


## Example Prompts

- Draft our Subject Access Request procedure for the DPC checklist
- Document procedures for portability, erasure and objection
- Assess our profiling and automated decision-making compliance

URL: https://rakenne.app/skills/dpc-gdpr-data-subject-rights/index.md

Try this skill: https://rakenne.app/a/?skill=dpc-gdpr-data-subject-rights



## Overview

Data subject rights (Art. 15–23) for DPC self-assessment: SAR, portability, deletion/rectification, restriction, object, profiling, and restrictions.

## Getting Started

Add your source materials to the project workspace, then activate the *DPC GDPR Data Subject Rights* skill. The agent will guide you through the process step by step.

## Example conversation

**You:** We get Subject Access Requests and the occasional request to delete or object. We need documented procedures and a one-month response process that covers all the rights in the DPC checklist.

**Agent:** I'll use the data subject rights reference (Art. 15–23). I'll draft procedures for: SAR (Art. 15)—identity check, one-month deadline, format; portability (Art. 20) where it applies; erasure and rectification (16–17); restriction (18); objection (21) and how we stop processing when someone objects; profiling and automated decisions (22)—human intervention and contestation; and any documented restrictions (23). I'll add a simple flow and template wording so your team can respond consistently and on time.

## Output excerpt

### Subject Access Request procedure (excerpt)

1. **Receive** — Log request, date, identity of requester.  
2. **Verify identity** — Ensure you are satisfied the requester is the data subject or entitled to act on their behalf.  
3. **One-month clock** — Respond within one month (extend by two further months only if necessary, and inform the individual).  
4. **Response** — Provide a copy of their personal data; purposes; categories; recipients or categories; retention; rights; source; profiling/automated decision-making if applicable; safeguards if transfer. Format: structured, commonly used, machine-readable if they request portability (Art. 20).  
5. **Refusal/restriction** — If refusing (e.g. Art. 23), explain and inform re complaint to DPC.

**Other rights** — Procedures for erasure (17), rectification (16), restriction (18), objection (21), and for profiling (22) human intervention and contestation are documented in [internal doc]. All communicated in the privacy notice.

## Extension and validation

This skill does not include custom validation tools. Elaboration is guided by the skill workflow and reference materials. You can add tools in `extension.ts` later (e.g. to check required sections or checklist coverage) if you want automated validation.


---

Back to [Skill Library](https://rakenne.app/skills/index.md)